Remote Vulnerability Management Analyst (EMEA)

Covenant HR LLC; South Africa; Remote; ZAR 1,167,000 - 1,667,000; Full time

Job summary

Covenant HR LLC is seeking a Vulnerability Management Analyst for a leading global technology and consulting organization. This 100% remote role covers the EMEA region, focusing on vulnerability triage, exposure assessment, and risk determination across diverse environments.

You will evaluate CVE/CPE/CVSS, coordinate with teams across Microsoft, VMware, Oracle/Java, Citrix, and cloud platforms, and document audit-ready findings with remediation recommendations.

Qualifications

• Hands-on vulnerability management and triage with exposure assessment.
• Expertise in CVE, CPE, CVSS and risk rating methodologies.
• Experience across Microsoft, VMware, Oracle/Java, Citrix, F5, and cloud platforms.
• Strong audit-ready documentation and communication skills.

Responsibilities

• Review, analyze, and triage newly disclosed vulnerabilities in complex environments.
• Determine impact on customer applications and assets.
• Evaluate exploitability with threat intel and advisories.
• Assign risk ratings using CVE, CVSS, and client criteria.
• Assess patch availability and remediation options.
• Develop audit-ready vulnerability assessments with findings and recommendations.
• Identify critical vulnerabilities needing immediate attention.
• Collaborate with globally distributed cybersecurity teams.
• Support ongoing vulnerability management operations and handoffs.
• Contribute to a 24x5 triage operation within the EMEA coverage model.

Skills

Vulnerability triage

CVE/CPE/CVSS risk

Enterprise tech knowledge

Audit-ready documentation

Job description

Covenant HR LLC is seeking a Vulnerability Management Analyst for a leading global technology and consulting organization. This 100% remote role covers the EMEA region, focusing on vulnerability triage, exposure assessment, and risk determination across diverse environments.

You will evaluate CVE/CPE/CVSS, coordinate with teams across Microsoft, VMware, Oracle/Java, Citrix, and cloud platforms, and document audit-ready findings with remediation recommendations.